Privacy Policy
Last updated: February 2026
Version 1.0.0
Introduction
Selva ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Selva mobile application.
Selva is a social impact app designed to help users track and share their environmental restoration activities, including tree planting and living layer habitat creation. We believe in transparency and giving you control over your data.
Information We Collect
Information You Provide Directly
- Account Information: Email address, username, display name, and profile photo
- User-Generated Content: Tree photos, planting locations (GPS coordinates), species information, planting dates, and living layer details (flowers, shrubs, vines, ground cover, grass)
- Social Interactions: Comments, reactions, follows, and notification preferences
- Profile Information: Bio, statistics, and environmental impact data
- Organization Membership: Affiliation with companies, universities, or other institutions
Automatically Collected Information
- Location Data: GPS coordinates when logging trees or living layers (only when you grant permission)
- Device Information: Device model, operating system version, unique device identifiers
- Usage Data: Features used, session duration, app interactions, and navigation patterns
- Error Logs and Crash Reports: Technical diagnostic information for debugging and improving app stability
How We Use Your Information
We use the collected information to:
- Provide Core Services: Enable tree and living layer logging, display your environmental assets on the community map, and calculate CO₂ offset statistics
- Community Features: Show your trees and living layers to other users, enable social interactions (follows, likes, comments), and display leaderboards
- App Improvement: Analyze usage patterns, identify and fix bugs, improve performance, and develop new features
- Communications: Send notifications about activity on your content, system updates, and (with your consent) occasional product announcements
- Safety and Security: Detect and prevent fraud, abuse, and security incidents
Data Sharing and Third-Party Services
We use the following third-party services to operate Selva:
Essential Service Providers
- Supabase (Database & Authentication): Stores user data, handles authentication, and manages real-time features. Data is stored in secure cloud infrastructure with encryption at rest and in transit.
- Google Maps Platform: Provides map visualization, geocoding, and reverse geocoding services for displaying tree locations
- Mapbox: Alternative map rendering and tile services
- Google Places API: Powers location search to help users find and navigate to planting sites
Analytics and Monitoring
- Sentry: Error tracking and performance monitoring (anonymized crash data only)
We do not sell your personal data to third parties. We only share data with service providers necessary to operate the app, and they are contractually obligated to protect your data.
Cookies and Tracking Technologies
Web App: We use cookies and similar technologies for essential functionality, analytics, and preferences. See our Cookie Policy for complete details.
Mobile Apps: Native apps use local storage, secure keychain/keystore, and device identifiers instead of traditional cookies.
Do Not Track: We respect "Do Not Track" browser signals by disabling optional analytics cookies.
Your Rights and Choices
Access Your Data
You can view all your data within the app via Profile → Settings → Account → View My Data.
Delete Your Data
You have the right to request deletion of your account and associated data via Profile → Settings → Account → Delete Account, or by emailing privacy@selvaapp.com.
Note: Deletion is permanent. Your trees, photos, and interactions will be removed from the community map and cannot be recovered.
Export Your Data
Download a copy of your data in portable format (JSON) via Profile → Settings → Account → Export Data.
Correct Your Data
Update inaccurate information at any time via Profile → Edit Profile, or edit individual trees from the tree detail screen.
Control Location Sharing
Manage location permissions:
- iOS: Settings → Selva → Location
- Android: Settings → Apps → Selva → Permissions → Location
Manage Notifications
Control what notifications you receive via Profile → Settings → Notifications.
Data Security
We implement industry-standard security measures to protect your information:
- Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
- Encryption at Rest: User data stored in databases is encrypted
- Access Controls: Strict authentication and authorization for all API requests
- Regular Security Audits: Periodic review of security practices and vulnerabilities
- Secure Authentication: OAuth 2.0 for Google Sign-In, bcrypt for password hashing
However, no system is 100% secure. If you become aware of any security vulnerability, please report it to: security@selvaapp.com
Children's Privacy
Selva is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@selvaapp.com, and we will promptly delete such information.
Data Retention
We retain different types of data for varying periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information (email, username) | Active account lifespan | Core service delivery |
| Tree/Living Layer GPS Coordinates | Until asset is deleted | Core service delivery |
| Photos | Until asset is deleted | Core service delivery |
| Comments & Reactions | Until deleted by user | Social features |
| Usage Analytics | 24 months | App improvement |
| Error Logs | 90 days | Debugging |
| Authentication Tokens | 24 hours (access) / 30 days (refresh) | Security |
| Cache Data | 1–7 days | Performance |
Deleted Accounts: Data is permanently deleted within 30 days of account deletion request. Users are removed from public views immediately. Backup copies may be retained for up to 90 days for disaster recovery purposes.
International Data Transfers
Selva operates globally. Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Selva, you consent to the transfer of your information to our facilities and service providers worldwide.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new Privacy Policy in the app
- Sending an in-app notification
- Email notification (for significant changes)
Your continued use of Selva after changes become effective constitutes acceptance of the updated Privacy Policy.
Third-Party Links
Selva may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: Request disclosure of personal information collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt out of sale of personal information (Note: We do not sell personal information)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise these rights, email: privacy@selvaapp.com
European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:
- Right to Access: Obtain a copy of your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, email: privacy@selvaapp.com
Legal Basis for Processing (GDPR Article 6)
We process your personal data based on the following legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and authentication | Contract (necessary to provide services) |
| Tree/living layer logging and display | Contract (core service delivery) |
| GPS coordinates for community map | Contract + Legitimate interest |
| Social features (follows, comments, reactions) | Contract (features you requested) |
| Communications (notifications, updates) | Contract + Legitimate interest |
| Marketing emails | Consent (opt-in required) |
| Analytics and app improvement | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Legal compliance | Legal obligation |
Withdrawing Consent: You can withdraw consent at any time via Settings → Privacy or by emailing privacy@selvaapp.com. This won't affect the lawfulness of processing before withdrawal.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:
- Privacy: privacy@selvaapp.com
- Security: security@selvaapp.com
- General Support: support@selvaapp.com
We aim to respond within 48–72 hours.
Consent
By using Selva, you consent to this Privacy Policy and our collection, use, and sharing of your information as described herein.